Aller au contenu

Photo

NwN Server and security update


  • Veuillez vous connecter pour répondre
253 réponses à ce sujet

#176
Lazarus Magni

Lazarus Magni
  • Members
  • 1 134 messages

Oclair Monanari wrote...

This whole disappearance of the master server is absurd. Just turn it on....
You fracked our game Bioware, why should I trust you again?


Hey Oclair,
If your posting just as a protest, that is your right. I don't think anyone is happy about the MS being down except account jackers. But if your posting because you think having the MS down has killed a server you enjoy due to account hacking, you should direct the server aDMin to this:
http://social.biowar...9/index/7846801

One of the best things about nwn 1 has always been the community, and not supprisingly it came through again with a solution for this community problem.

Laz

P.S. My apologies Oclair, this was before I knew the whole scope of the issue.

Modifié par Lazarus Magni, 12 novembre 2012 - 05:12 .


#177
Irisiri

Irisiri
  • Members
  • 8 messages
wtf bioware? is this real life? why is this happening to me? i feel funny??

#178
ultima03

ultima03
  • Members
  • 38 messages
Dude, I was really trollin' hard on this one. Takes some skills.


<3<3<3<3<3<3<3<3<3<3<3<3<3<3<3<3<3<3<3<3

msa down ROFL !

Modifié par ultima03, 27 janvier 2012 - 02:26 .


#179
Sethan_1

Sethan_1
  • Members
  • 213 messages
So, master server has been offline for just short of 9 months now.

Any word on what the status is, Bioware?

#180
Melkior_King

Melkior_King
  • Members
  • 135 messages
What's it been now? A year? Must be close to that, but I haven't been counting.

So are we ever going to get the master server back? If not, how about telling us so we can all update our hosts file to redirect the master server search to 0.0.0.0 and save the delay?

#181
ShinsFortress

ShinsFortress
  • Members
  • 1 159 messages
Would like a fix for this. Doesn't seem likely, but would like a fix.

Edit: typo.

Modifié par ShinsFortress, 08 avril 2012 - 10:49 .


#182
Fester Pot

Fester Pot
  • Members
  • 1 393 messages

ShinsFortress wrote...

Would like a fix for this. Doesn't seem likely, buy would like a fix.


You can find the fix here.

It's just that simple!

FP!

Modifié par Fester Pot, 07 avril 2012 - 11:51 .


#183
ShinsFortress

ShinsFortress
  • Members
  • 1 159 messages
Thanks. Have seen that. I would like an offical proper fix with the master server doing the job it was designed to do, not a workaround. You can still buy the game, so EA/Bioware should still be supporting it!

Modifié par ShinsFortress, 08 avril 2012 - 10:51 .


#184
Empyre65

Empyre65
  • Members
  • 372 messages

ShinsFortress wrote...

You can still buy the game, so EA/Bioware should still be supporting it!

NWN is an Atari game, not an EA game. Bioware might be still officially supporting NWN if they hadn't been bought by Atari's competition, EA. Some NWN devs that are still at Bioware are still supporting NWN, but not officially and not on company time.

#185
jmwylie

jmwylie
  • Members
  • 1 messages
 Any info/hope on being able to get the CD Keys logged on the old site? 

#186
Fester Pot

Fester Pot
  • Members
  • 1 393 messages

jmwylie wrote...

 Any info/hope on being able to get the CD Keys logged on the old site? 


Here you go!

Chris Priestly wrote...

Hi Everyone

First off,
thank you for all your patience as we continue to investigate and work
to solve the issues that arose after the hacking attack on the Legacy
Neverwinter Nights servers some time ago.

Our top priority
remains ensuring Neverwinter Nights fans can continue to enjoy playing
the game, and shortly after the incident we re-established the game
authentication servers; everyone whould be able to play Neverwinter
NIghts and the persistent worlds created in Neverwiner Nights. If you
have purchased a copy of Neverwinter Nights, you should be able to
authorize and play your copy. If you are experiencing any problems
authenticating your copy of Neverwinter Nights or cannot connect to your
persistent world or game, please let us know below.

We are
working with Atari and the other parties involved to resolve remaining
outstanding issues including access to the legacy forum content. When we
have more definitive information and timelines we will provide another
update. We appreciate your dedication to Neverwinter Nights and we thank
you for your patience.



[smilie]../../../images/forum/emoticons/devil.png[/smilie]


FP!

Modifié par Fester Pot, 10 avril 2012 - 01:54 .


#187
PlasmaJohn

PlasmaJohn
  • Members
  • 95 messages

Fester Pot wrote...

jmwylie wrote...

 Any info/hope on being able to get the CD Keys logged on the old site? 


Here you go!  ...

Just so people don't get any false hope that quote was one of the very early responses.  Since that time the assurances have become much less frequent and the promises much less specific.  Bioware has stopped participating in these forums.  The only action taken to date has been the activation of a service that allows the premium modules to function (and it doesn't require the one you registered).

It seems pretty clear that nether the key data nor the Master Server are coming back.  If you just want to play online, get a key from GOG.com for 10USD (or less when they have a sale).  If you need a specific key you're pretty much out of luck.

#188
fish taco

fish taco
  • Members
  • 1 messages
yea so if the servers ever come back will i be able to update my game since im just buying the game or do i have to look for the patches somewhere else?

#189
HipMaestro

HipMaestro
  • Members
  • 1 515 messages

fish taco wrote...
yea so if the servers ever come back will i be able to update my game since im just buying the game or do i have to look for the patches somewhere else?

The servers about which FP cited a month ago are not related to the server that contains the patch files.  Those are still available and accessible through the Bioware files page and a comprehensive list of links for all versions of NWN in the Win7/Vista installation sticky of the self-help Tech forum.  There are also alternate download sites referenced.  I'm not sure whether the Vault or Nexus has any plans to mount them as part of a patch back-up plan, but it is possible, I suppose.

At this point, for all intents and purposes, I believe even the most optomistic of our community have recognized that no resources have been allocated to restoring the master server nor will there be in the foreseeable future.  Therefore, until an official announcement by Bioware is published about restoration schedule, it is a dead issue.

#190
Lazarus Magni

Lazarus Magni
  • Members
  • 1 134 messages
There are a few tidbits, some of you all may find relevant to this discussion:

http://social.biowar...ndex/13633358/7

Particularially how the loss of the master server, and the complete negligence in an effort to restore it, let alone keep the community aprised has detrimentially affected the community.

#191
Lazarus Magni

Lazarus Magni
  • Members
  • 1 134 messages
In particular, here:

Lazarus Magni wrote...

Losing the master server really crippled NWN 1 PWs. Luckily Funky Swerve came up with a work around, but it didn’t mitigate the damage done to the player base, that is still being done. It only was a work around to prevent PW’s player accounts from being totally jacked. Bioware really let us down here. But don’t you think that might have been different if they were still pulling 25-50k/mo from hosting profits alone? In my estimation, the answer is yes.


And here:

Lazarus Magni wrote...

Actually, if you consider PW owners... players, which I do, NWN 1 is pay to play. It's free for the majority of players, but not PW owners. You have to pay for hosting, and that is one of the main points I have been making. We PW owners pay for hosting, but we don't pay bioware. I love my host, and no disrespect to them (heck maybe bioware will buy them out as an experiment, and they will be better off for this exposure), but the fact is if bioware would have been getting additional revenues from this game from hosting, they would still to this day have a reason to support it. (AKA the master server at the very least.) Or how bout being a part, and promoting it's 10th year aniversary? They didn't even support that effort in the least. It was a 3rd party (gog.com) that did and the community. Honestly if you ask me, bioware wanted NWN 1 to die when it pulled the plug on the master server. Their website got hacked? How is that relevant to the master server? Seemed more like an excuse to me, to kill off a game they are no longer getting a profit from, and would rather see die than continue. Which comes full circle to one of my points. If bioware actually offered a hosting service, they would still be making money of NWN 1, still have a reason to support it, and it would still be free for the majority of players.

.


And here:

Lazarus Magni wrote...

As far as the master server… I beg to differ. First of all, bless Funky for releasing his system, but it took a pretty talented scripter to get it up and running on my PW. And secondly (and more importantly) it didn’t fix the problem, it just prevented it from getting worse. PW’s like mine which have a player base from years of being around got totally crippled, due to the fact that I (and the previous hosts of Av) were not keeping track of my players CD keys. Why? Because the master server did that for us. Sure moving forward, using Funky’s system when a new player logs into my server their public cd key is tied to their account. But what about the 9 years worth of player accounts in my server vault? I have over 4k player accounts (maybe a lot more) in my server vault. I had to disable every one of them due to account jackers. I consider that pretty darn crippling, and the drop off in NWN 1 players since that happened I think speaks to that as well.


And here:

Lazarus Magni wrote...

Lazarus Magni wrote...

Oh and to the toon hacker who visited my PW tonight...


The more I think about this the more this is starting to ****** me off...


Oh. btw… I think I may have mentioned something in this thread about how bioware totally screwed us over by abandoning the master server?

And I think I mentioned how it was great and all the community came up with a work around, which didn’t actually fix the problem, but did stop the bleeding?

Some people said, oh, this hardly crippled the community. I suppose that is true if you have a super genius scripter. Luckily we have one of those working with us. However here is another not so small example about how this loss totally screwed the community.

I have had some idiots logging on to my PW with hacked toons. I can ban them, but they can just use a CD key generator, and a proxy server to relog with in minutes. So ok, my validator (no not a bioware provided one, but rather one from the community) catches these ****s, but they can keep doing it. And what about the 100’s of other servers that aren’t blessed with as gifted of scripters and community support as I have been?

In short the loss of the master server has completely opened up all PWs (except those of the most sophisticated nature, with state of the art, damn near professional level community contributed security systems), to being vulnerable.

Someone said something about how the loss of the master server was not a crippling effect on the NWN 1 community? That someone is either involved in one of the PWs with the capacity to actually thwart it on their own (aka with no help from bioware), or interested in perpetuating that myth for some other agenda.

As much as I can be a total jerk, IMO defending such an outcome, and trying to pass it off as no big deal, is the serious violation.

Now as mentioned, I guess I can’t really blame bioware. They have no real incentive for supporting the game. Which is kinda the purpose of this whole thread. The community can solve a lot of problems. But apparently they can’t (or are unwilling to) solve this one simple one. Not for bioware, retroactively, nor presently, nor for the future, nor for the NWN 1 on line community at large, nor for any other game modeled after the precedent NWN 1 set.

As I said, apparently the future is bleak.



#192
Lazarus Magni

Lazarus Magni
  • Members
  • 1 134 messages

Squatting Monk wrote...

If you recall, I said the reason it wasn't crippling is that there were workarounds even when the Master Server was online. Servers are very vulnerable right now, yes, but they were very vulnerable back then, too. It's just that now everyone knows how vulnerable they are. Yes, the Master Server being down removes a first line of defense, but it also forces server admins to pay attention to security where they were complacent before. All things being equal, I'd prefer to have the Master server and have server admins implement tight security practices, but we're stuck with just the latter. People need to get used to it.

Lazarus Magni wrote...

The community can solve a lot of problems. But apparently they can’t (or are unwilling to) solve this one simple one. Not for bioware, retroactively, nor presently, nor for the future, nor for the NWN 1 on line community at large, nor for any other game modeled after the precedent NWN 1 set.

As I said, apparently the future is bleak.

What, exactly, did you expect the community to do, besides kicking around "wouldn't it be nice if..." ideas and hoping a big company think it's worth sinking millions of dollars into?


First of all what makes you think it would cost millions of dollars? Where are you getting that estimation from? It could be as simple as just turning the master server back on (if it’s not already… you don’t get a webpage no longer exists message when you visit nwn.bioware.com, you get re-routed here.).

Part of the problem is Bioware was intentionally vague about what happened, and has not been forthcoming about any details since (neither regarding what happened, nor the resolution.) Everyone has just assumed, ok no response, means it’s dead permanently.

Part of the problem for me is that I am not an IT professional. But from my own un-IT-educated perspective this is how it breaks down.

Bioware’s nwn 1 website got hacked. Somehow this also affects the master server. So what is the master server? Apparently it was the server that hosted the web pages, and was involved in interfacing (or however that works) with Game Spy to cross check CD keys, with player accounts for authentication.

So, this begs the question. Why would anyone do this on a 10 year old game? Usually when sites get hacked they are storing finical information of their users. Linkedin is a recent example of this. And usually those sites are back up within days if not hours (although I have no idea how stolen financial data is rectified.)

But that was not the case here. Bioware didn’t store our financial data. So what did the hackers get? Our e-mail addresses? Possibly our player names and CD keys? Which still begs the question… why? I know I haven’t received a massive barrage of spam because of this. So some hacker is risking jail time, so they can get access to someone’s player account on a ten year old game? I don’t think there is much of a marked on e-bay for nwn 1 player accounts any more… It just doesn’t make any sense.

Ok so what if that was the motivation… The damage has already been done, turning off the master server doesn’t fix it. Turning the master server back on however, would fix a lot. So sure, that one person (or couple people), might be able to log into PW’s with other peoples accounts. Provided those PW’s don’t have Funky Swerve’s security system installed as a second line of defense. But as it is now, it’s not just those perpetrators who can do this it’s anyone. Turning the master server back on, won’t stop those thieves, but it will stop others taking advantage of this.

So what would bioware’s motivation be for doing this?

1) Protect their game’s integrity, and their company reputation.
2) Protect their customers
3) Catch the people who did this.

I think 1 and 2 are self explanatory. But one barrier to this may be financial. It’s possible any revenue bioware is getting from new sales of NWN 1 no longer cover the cost of maintaining the master server. I offered an idea which might be able to make up the difference. Bioware could start (or buy out) a hosting company. There are a lot of servers out there paying between 24$ and 400$ a month. That is a fair amount of money Bioware is not currently getting from their product. Bioware could offer reasonably priced hosting, promote it right here on their web pages (and elsewhere), and use the revenue to both support the hosting service, and the master server maintenance costs. Anything left over is cake.

In the instance of buying out an existing company, they would not even have to do much. The infrastructure and personnel is already there. They could either make them part of the company, or hire them as independent contractors.

And as far as 3… It’s classic crime solving. You follow the money (or data) trail. Right now the thieves have no use for the player info they got. If CD keys were relevant, perhaps they would attempt to use them somehow. Bioware could ask PW owners to report any suspicious activity (like someone logging in with CD keys they should not have), and Bioware and the community could keep an eye out for how else this might be used (selling on e-bay, or what have you.)

SM, you asked what would I like the community to do? It’s sign a petition to bioware imploring them to restore the service. It’s offer ideas like this, which could really resolve this issue.

This post may be a year late in coming. But it’s here now. And the problem (lack of the master server) still is too. The issue is only dead if we let it die.

Modifié par Lazarus Magni, 31 août 2012 - 07:08 .


#193
Squatting Monk

Squatting Monk
  • Members
  • 444 messages

Lazarus Magni wrote...

First of all what makes you think it would cost millions of dollars? Where are you getting that estimation from? It could be as simple as just turning the master server back on (if it’s not already… you don’t get a webpage no longer exists message when you visit nwn.bioware.com, you get re-routed here.).

I didn't realize you were talking about the Master Server. I thought you were referring to the fact that there was not much useful coming out of the Future of MMO thread. Millions of dollars there is referring to the cost of developing a great new game that can last for years and appeal to a wide audience.

I didn't read your post closely enough to give a proper response. My bad. I apologize.

Lazarus Magni wrote... 

Part of the problem is Bioware was intentionally vague about what happened, and has not been forthcoming about any details since (neither regarding what happened, nor the resolution.) Everyone has just assumed, ok no response, means it’s dead permanently.

QFT. I think it sucks the way BioWare handled this. If there was no plan to get the Master Server back up, it would have been nice to have been told that from the get-go.

Lazarus Magni wrote... 

Bioware’s nwn 1 website got hacked. Somehow this also affects the master server. So what is the master server? Apparently it was the server that hosted the web pages, and was involved in interfacing (or however that works) with Game Spy to cross check CD keys, with player accounts for authentication.

CDKeys were a big one, yes, but usernames and passwords were the major cause of concern, I think. You can always keygen a new CDKey, but if you can steal someone's username and password, you can sign into the game as another player without having to bypass the Master Server. You could even log into the BioWare website as that player and reset their password and email so they can't recover it, taking over their player name. If that user had created a guild on the BioWare site, they could wreak havok on that, too.

(Aside: many, if not most, people also use the same password for every account, so stealing NWN passwords could possibly let you gain access to someone's email. From there, getting into someone's bank account isn't hard. So let this be a lesson to folks: use a different password for every account, and change them regularly, just in case.)

I think shutting down the Master Server puts a temporary stop-gap in that. Many PWs had enabled the option to require Master Server authentication. Taking down the Master Server would keep anyone from logging in until some security measures could be put in place (unless the malicious player knew a way to get around that requirement which, IIRC, was doable).

Lazarus Magni wrote... 

SM, you asked what would I like the community to do? It’s sign a petition to bioware imploring them to restore the service. It’s offer ideas like this, which could really resolve this issue.

This post may be a year late in coming. But it’s here now. And the problem (lack of the master server) still is too. The issue is only dead if we let it die.

Is this still something BioWare can do? I was under the impression this was in Atari's hands. Regardless, I would sign a petition if I knew it was going to people capable of fixing it.

Modifié par Squatting Monk, 31 août 2012 - 08:43 .


#194
Lazarus Magni

Lazarus Magni
  • Members
  • 1 134 messages
Well the master server for player authentication in multiplayer play and the website are 2 separate issues. Related, yes, but distinct.

If they turned back on the master server, but not the website, there would be no danger of having the thieves log into the website and wreaking havoc. But this would re-instate the first line of defense for PWs, and the on line community as a whole.

With the master server off, anyone can log into anyone’s account, unless the server has had the ability, and taken the time to put in place a community submitted security system. Re-instating that would restrict that to only being done by thieves. Why is this good? So they can be reported and stopped.

But what is equally as bad with the master server being off is the ability for people to key gen, and not only log in as whoever, but completely avoid server bans. A ban meant a lot more when it was actually a CD key the person bought. Now it’s a total joke.

#195
Lazarus Magni

Lazarus Magni
  • Members
  • 1 134 messages
I made an online petition. People can sign it here. Or if someone feels more inclined they can make a better one of their own.

http://www.change.or...erver-for-nwn-1#

Modifié par Lazarus Magni, 12 novembre 2012 - 05:14 .


#196
Squatting Monk

Squatting Monk
  • Members
  • 444 messages

Lazarus Magni wrote...

Well the master server for player authentication in multiplayer play and the website are 2 separate issues. Related, yes, but distinct.

If they turned back on the master server, but not the website, there would be no danger of having the thieves log into the website and wreaking havoc. But this would re-instate the first line of defense for PWs, and the on line community as a whole.

But the website wasn't the only issue, remember. The Master Server authenticates the username and password the user enters when they go to Multiplayer mode. If those passwords were obtained by hackers, they could use those to log into the game as that player, the Master Server would give the OK, and the server would still be vulnerable.

Getting the Master Server back would be a difficult undertaking. You couldn't just go back to the old database, because that was compromised. You'd have to have every user set up a new password, but you'd have to be sure it was them doing it. If you just started over with a fresh database, you'd have to worry that people creating accounts were not actually the owner (e.g., I'd be worried that someone would create the Squatting Monk username, enabling them to access all my old haunts and keeping me from being able to log in). I'm not sure what the best way to go about fixing this would be.

But what is equally as bad with the master server being off is the ability for people to key gen, and not only log in as whoever, but completely avoid server bans. A ban meant a lot more when it was actually a CD key the person bought. Now it’s a total joke.

Don't forget that you can also ban people by IP address. That also doesn't stop them, of course, but it can slow them down and make it less fun. The system I set up uses a combination of CDKey, IP address, and player name bans. It associates them all together to more easily detect when someone is trying to get back in after a ban. If that turns out not to be enough, I may link player accounts to accounts on my forums.

Remember, regardless of whether there is a Master Server or not, all security is just a temporary barrier. Given enough time and dedication, people can get around any security system. Your goal is not to find a system that magically stops the bad guys; it's to slow them down and make it too much of a hassle for it to be worth it to them. This is the princple behind fences, locking doors, or burlar alarms. Yes, a thief can get around them. But each barrier you add can screen out more and more criminals.

Modifié par Squatting Monk, 31 août 2012 - 09:13 .


#197
Lazarus Magni

Lazarus Magni
  • Members
  • 1 134 messages
This is one my points. Right now anyone can log in as anyone (unless the server is using Funky's system or something similar, which isn't retroactive. It onlyapplies to accounts that log into the server since it was installed.)

If the master server were back up, using the old DB, only those hackers would be able to do this. In other words... You would be able to find out who this was.

Furthermore, as you mentioned the Master Server is only the first line of defense. Turning it back on would not disable the PW security systems they have put in during it's absence. So turning it back on would do no harm, and only good.

And as far as bans... it's easy to use a proxy. The guy who visited us last night for example. By the time I banned his/her player name, public cd key, and IP, and then restarted the server. He was the first one back on with all new ones of all of those. It didn't slow him down in the least. It was a total joke. Now if he actually paid for those CD keys, a ban would have a lot more teeth to it. And if he was stil able to pull them out of thin air, this might be a good indication he is one of the individuals responsible for the hak, or if not, is downstream from them.

#198
Squatting Monk

Squatting Monk
  • Members
  • 444 messages

Lazarus Magni wrote...

If the master server were back up, using the old DB, only those hackers would be able to do this. In other words... You would be able to find out who this was.

No. Typically, hackers don't keep data only for themselves. A data drop on Pastebin a la Anonymous and everyone has your passwords. That said, I do wonder about the likelihood that the hacker or the stolen data is still around at all.

Furthermore, as you mentioned the Master Server is only the first line of defense. Turning it back on would not disable the PW security systems they have put in during it's absence. So turning it back on would do no harm, and only good.

Assuming that everyone has put those security systems in place (some servers may still be requiring Master Server authentication, but these would largely be servers whose admins have been inactive over a year), this would be true... to the extent that everyone remembers they need multiple lines of security, and not just to rely on the Master Server. Getting a gate around your community doesn't mean you can leave the doors unlocked.

And as far as bans... it's easy to use a proxy.


Hence why I said "That also doesn't stop them, of course." There are ways around every security system.

Now if he actually paid for those CD keys, a ban would have a lot more teeth to it. And if he was stil able to pull them out of thin air, this might be a good indication he is one of the individuals responsible for the hak, or if not, is downstream from them.

Unlikely. You don't need to steal CDKeys. There's this really obscure website called Google that can hook you up with additional keys.

#199
Lazarus Magni

Lazarus Magni
  • Members
  • 1 134 messages

Squatting Monk wrote...

Lazarus Magni wrote...

If the master server were back up, using the old DB, only those hackers would be able to do this. In other words... You would be able to find out who this was.


No. Typically, hackers don't keep data only for themselves. A data drop on Pastebin a la Anonymous and everyone has your passwords. That said, I do wonder about the likelihood that the hacker or the stolen data is still around at all.


Well exactly, and if they drop that somewhere they are cought. Nothing is truly anonymous on the net. I am pretty sure a warrant would reveal the source.

And again what on earth could possibly have been the point of this? Why isn't anyone asking that? We are talking about a website for a 10 year old game being hacked, that didn't store any finacial data. It just doesn't add up...


Squatting Monk wrote...



Furthermore, as you mentioned the Master Server is only the first line of defense. Turning it back on would not disable the PW security systems they have put in during it's absence. So turning it back on would do no harm, and only good.

Assuming that everyone has put those security systems in place (some servers may still be requiring Master Server authentication, but these would largely be servers whose admins have been inactive over a year), this would be true... to the extent that everyone remembers they need multiple lines of security, and not just to rely on the Master Server. Getting a gate around your community doesn't mean you can leave the doors unlocked.


Right, assuming every active server has this. Those that don't have already been screwed... But as I mentioned the community security systems aren't a fix all. With out the first line of defense they merely stop the bleeding, they don't cure the wound.

Squatting Monk wrote...



Now if he actually paid for those CD keys, a ban would have a lot more teeth to it. And if he was stil able to pull them out of thin air, this might be a good indication he is one of the individuals responsible for the hak, or if not, is downstream from them.

Unlikely. You don't need to steal CDKeys. There's this really obscure website called Google that can hook you up with additional keys.


Umm... your scarcasm aside, correct me if I am wrong here, but isn't one of the functions of the master server to authenticate a CD key with a registired user? You can CD key gen (or torrent) til you are blue in the face but if you don't register those keys (opening yourself up to being cought) you wont be authenticated.

P.S. I am pretty sure torrenting is actually considered stealing... If that is what you are refering to as googling...

Modifié par Lazarus Magni, 01 septembre 2012 - 02:08 .


#200
Lazarus Magni

Lazarus Magni
  • Members
  • 1 134 messages
Double post removed.

Modifié par Lazarus Magni, 01 septembre 2012 - 02:08 .